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1. ^^$H1 7)7^ 4^ 7l#^c> 

7l^V ^E-l3L ^ ^ ^joj 

3. «ll^ H o^^ 

^^r, 91^*\ 31*1-=--^ ^ ^ ^li^i 3-§-3^r <*1«§^1 *II*1-^(CRL : 
Certificate Revocation List) ^ « 0 T-^ofl &°H , # 7 l 

<*#«H #7l ^-^^Ml rfltV <*l#^-|r ^*Hr *fl 1 #31; #7) ^ 

^ *!#3*H 4^ 7}^^> ^1^1- ^2:*H# ^#«Hr 

Xl 2 #31; #71 o]-^ ^1^1 Moll ^l^M^ 3-8-«M #tfl1> v 

^ -R-M^ 3^*Rr XI 3 #31; ^ a>-8-*>3 ^1^1^71 ^-7] °i#>h 

^1^1^ ^-nfl^-a- °l-g-*H oi^a-i ^-sL-ihg- ^x^jl, n vfl-g-g- 3H*Rr XI 4 
#311- SL^. 

4. ^_a.tt -8-5. 

£ Sl^>H ^ *1^ °l-8-^. 
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S. 4 



o]^ ^]^l^-s.(CRL), ^-Hfl^(DP), Sfl^tK 1 , ^y.^ 1 ^ L 11 (SUBJECT_NAME) 
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Sl^r*1 3)1^1-^-^- ^r^> {Method for managing dispersion certificate 

revocation list} 



£ 3a ^ £ 3b ^ ITU-T X.509 5^-*H*1, <&^*\ ^z\^<$ ^-afl^^- ^-g-s> 

£ 6 £r ^<Hl n*}^ ^ ^ ol^^o] o]-^ 
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2000/11/1 

5- 8 £ ^ofl ^ 31*1^ ^-e) ^ ^ oi-aI^^o^ o] 

41 : ^1^7l^r(CA) 42 : ^ajSBl ^ 
43 : *r-§-*r ^r^" 

<13> ITU-TC ITU-Telecommunication Standardization Sector) X. 509°1H ^^^-Jil 

$X$r ^fl^l 7l^V ^-SCPKI : Public Key Infrastructure)^ iL<£ A^ti)^ #6fl*1 
j4|*1^-*(CRL : Certificate Revocation List )^r &?)*}7) tl 

^^S.^- ^AV #5} ^^A)7]7l ^ JES^^T 71^ ^ 
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1020000060053 2000/11/1 

°l-§-*Rr iL3f3 ^^*>7ll oj-g.^ ^ 015:41=- sfl^. o] 

^7l^o] Tflf^ 0.3. <a^€ "fl?m#°ie* ^ *r 5^. 

^ ^Wlil" *fl^Kr Sl^l^, -§-!=- 7l#, ^^1-^ 

-^Sl^l ^ <?1^H^ ^ ^J!}- 

^.S-tb , ^-7fl7l -§-<^ 7l» #S|*Hr *>^I<H, = , 

3^-6.3. 1: ^ sa^. PKI7> £*b<#7] efl , ^ ^ ^ 

€■ -§-g- ^>M- «y^7l^, ZIBlJl ^MI^HH JL#^^-S. cl-§-£|^^ -^ 7 fl 71 # 

<16> ^-53, itu-T X.509^1^^ 7)^0] 7 ]-<y^].ofl7fl ^Sfl ^ fl-^oj] tflfjfl 

tfl^Kversion 1, vi°|2}- ^r), 2(version 2, V2e} ^ 

3(version 3, °1*V V3^ ^)-§- ^S>ji ^cf. nJ-eH , <?1^ s^l-S- 

tffl*]s.-s. V2^ ^£L(^, £ 3b 

<17> ^ol, B^s-i^g- ^Bl*>7l ITU-T X.509 £f 

7H1 ^^5]^ ^1 <^7H, ^l^^ofl «- U fl^ ^7lM#ol 
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1020000060053 2000/11/1 
3*1 SHr ^-f (£. 1 #2: HI cfltb <IH1» S. 2» -iMI*l ^sjiL^ cf-S-^- £ 

<is> £ 2 £ Hi 3-§-3xr *}-g-*> €^°fl*l Sl^M afl*l^"§- ^"^ y o V 

<19> - £ 2^1 :£*1€ w>sq- £o) f #tfl* 6 V 01 ^ ofl cfl^V -B-JL^-g: 3^*>7l ^sJH^r *l~g- 

•3^^X201) #tfl«J-°} s » *]~8-3H -y-tfltg- °1#>*H ^ 'LDAP_SEARCH' ^€-^§- ^ 
- W(202) • 

<20> ^O^, ^7}oflA-1 ^Jg-g- A}-g-«H A^(204)S. -tftfl« 0 VS] o}^| 

» A^^(203) *1*H(204)fe *K0o} si- °l-§-*>^ CM ^€ 

'LDAP_SEARCH' 2j-^tb^(205). 

<2i> zlxMji, ^-fr a>-§-5><^ rfA] cjajsej a^s. CRL sj-^^r ^ SL 

^^(206) tq^Me) ^(204)^- CRL ^«]-g- ^^$cf(207). 

<22> ZLZ\#, A>-g-*> ^^w>^ CRL sj-^^r 7l«h°S. -R-JLAl# aflas>o} 

(208), (205)^oll^ 'LDAP_SEARCH' ^-g-# «>l-8-«fl #tfl# ©1^*1 <y<f^ 

3 ^S^JM- ^#*KiL(209), *fl# ^^^lS7> CM 5&fe*l# ^*M(210), 
^«iS7l- CM #tfl«J- -B-jLAj^- n^>jl(211) *fl# ^€^iS7> CM 

tftflHh ^1#^7V Wl-B-JL^ ^1^^(212). 
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<23> OH-H, #7]S± ^efl 7l#ol)^^ ol^^EAc^ M.^ 7><g*H cfl^- 

» ofl, Sl^H* ^*Kr D JtHEi 51 (mandatory) <f^ *>u(-o] ^w^e 

(SUBJECT)* *fl4=]^r^ <Qn ^j±a|m (SUBJECT) °fl tfl-§-*Rr *H3^- 

^ ^Jij-^ H#*H CRL^ DP 7l^^^.S A}-g-^- ^ ^ «Vo_Vol Q + 



<24> >5J-7l^ a>sq- ^ ^ofl «-g-*)-7l ^*><^ o>#^ ^^-S., ^-nfl^ tfl^ 

<25> ^, ^l#Al>h^oflA^ *1«W*1 #tfl« 0 V ^l^ofl rfl^ 

-B-JL^ ^SL» 5U^r 31 71^-^ AV-g-7>>#ol jLJjJ-^ O.S. 

^ *}JL, A^^«-E^ A}-§-*> ^^TJO.^ cf^-S.^.^ CRL 5^-^ £17l 

# sl^sM^ ^sl^cll ilLS|^r #o]^, CRL 2nJ=3.^ ^ 

^^r-Sr UflaflsH N7fl^ CRL i^El°fl ^ (balance) &7fl CRL ^J±l- *i ^/^s) *>7l 
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^ ^ *)-§-] 

3^ °]#^ 5ilxl^-^-(CRL : Certificate Revocation List) ^3 « 0 v ^°fl . " 

^-ij-*Rr *)] l #7fl; ^71 ^4=-^ 9l^^°\] 4^ 7f^^ <y^# ^-^lS 
<d^i» 1^*Rr 2 #31; #7] >£-g-£ <£«g^i 3l*l4z-iHl ^-tifl^ pfl^v] 
^* 3-8-*H -H-M^- 3<§^Hr ^ 3 #31; ^ A>-g-^ o]^a^ ^ 

<27> S^V, £ ^£r, = ^*}*k ^ A d-7l 

*>^r 71^; ^7] ^l^^^l 4^ 7>^A> ^£*Rr ^^l* 

<?1^« ^SRr 71^; ^71 ^-#3 Bfl^m-iHl ^fl^ nfl^q^o. ^.g.*}*} 

^tfl* <y#^ -H-jl^I- 3#*Kr 7]^; ^ ^-g-^ o]^!- 3^1^1^1-71 fl*H ^7] 

7l^# ^«^]7l 71 =S.ZL^^r 71^- tl# ^ Si^r 7l^M* *H^rJ- 

<28> £ M^^r, ol^Al^^ollA-1 ^^MBl *WM Aj-cfl^V Ol^oll cfl^j- -f}- 

^ sJ-jl, ciajse) A-iuis-^-Bl A>-g-^i- cfM^AS chgrSS. ^ CRL -4^ 3. 

71!- 3^2M?1 ^^Al^> Cf^Jlj- Zlo)l n}^ 7 }^*> ^.^Wl^S. ^\^} 

29-10 
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CRL aflaflSH N7fl^l CRL 2t = ofl 5^(balance)&7fl CRL 

<29> s.^, ^if ^ ^Mltb ^-g- ^> 

^ -S-tq- ^ ^olcf. ojs]., %2±Z}<$ l^l «>^^r ^ 

oo> 5. 4 fe- ^-g-S)^ ^-7fl7] 7ltiV ^-SCPKI : Public Key Infrastructure) 

<3i> s. 4cfl £A]^ ^-o], -g- 7 fl>l 7lti]r ^-2:(PKI : Public Key Infrastructure) iL 

CA)(41)3r, ^1^71^.(41)01 TflAltV Sl^M/CRL-g- ^«li 7><37.>«-ol ^££i§- ^ ^S.^- 
*fl# ^-i-^ ^-e^M ^tb ^*l£eJ *W42)$r, ^71^(41) AS ^ 
^/ 31*11- JMi*rul, ^til^ c]«qs.s| a^(42)S ^e*H -*tfl»8- *l#Ai<5}- CRL 

# tq-g-s.= ^> ^Mr^^M ^^*V7l ^t!" #^(43)^: 

<32> £ 5 fe ^ ^ofl 4^- o]#A-l ^1^1^ ^-A> #5} « 0 >^ ^ <?l^l^o] 

^(CPS : Certificate Policy Statement) ^ tfltb Jl-§-5E°1 . 

<33> £ 5^1 ufaf ^-ol ; C A°1H CRL4 ^l^^^l- ^*>7l ^SfWif., ^ 
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1020000060053 2000/11/1 

DITCDirectory Information Tree, °]*} DIT)^ ;tJE. ^(number of nodes in DIT, o]*} N 
°lSr % 1 ^")^r «fl^^(H())l- ^^tt^(501). ^7^, N^Sr CA<^1 >H ^ t:\JL7\- ^ CRL 
7fl^# ^}JL, HOtt OHH a>-8-^- ^^i=r. 

<34> Ol^^, 7><a^ Oi^A-H- 71^- ^ tsVM-S! ^^^^ ^ 

(SUBJECT_NAME, ^1^> (501) -4^} Sfl^Shr^ ^^^^ 

(502) . 

<35> o]^i ) (501,502)^# -f-efl 3§S^ ^ €*r#M: ol-8-*M <?i#^ 

21 £«fl ^*hg- ^>#W(503). ol-i- t^ifl^ * [^^2] 

<36> 1] 

^(S) == / 

<37> [^*\ 2] 

Vmax - Vmin _ 

AT 

<38> ^, [^*Hi]:4 ^o] afl^*^ H()°ll S» <£^r ^ $X$r VS. 

S# Vmax^ 3)^*1 <>] Vmin^ ^Kn, °1# i~Pfft-§: nfl 

^-wfl^ ^M^-l- 3-§-^ $l*fl sfl# ^&(ofl: crl_dp_flag)* 'yes'S 

*i *(504), 71EJ- -f-^§- ^l^*icf(505). 

< 40 > E 6 £r ^ofl itj-s. ol^Ai Bll^s-s- «.a> ^ aj-^ ^ 
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<41> £ Q6\] SAjSj U>£4 ^-o}, CA«^1^ 7><g^ 91^9 ^*V7l 4] *IM ^ *fl # 

(crl_dp_flag=yesH Sl&^l* 3^1^(601) °] ^3*1 <&9);SL& =L*$- ^ 

^1-J1(602) ( ii^S^ *H4=l^r^ < a^3Jt«S 7}<Qz}2] <£! (SIBJECT_NAME) , 

- ^ S» ^#W(603). 

<42> olc^A^ s°ll tfl^ sfl^, ^ Vtmp» ^#^KVtmp=H(S))(604) . 

<43> o^, (605HH (607)^-8: -f-Sfl (604)^011*1 <^o]^\ Vtmp7\ X^fe- t^SJI; 

^- °H, (608)^1^ (610) <?]^H ^l^l^^ DNCDistingushied 

Name)*)l3l-I- 0U(0rganization Unit)^ CRLDP(n) Organization)^ SECURITY^., 
C(Country)^ krS ^-^^(608,609,610,611). 

<44> ^, (605)3j-^<fl>H (607)^^: ^Rr ^M^. Sth (608,609,610,611)^ 

3£r (605HH (607)^-8- ig-n <££r ^ n-i- ^S}^ *fl# 

91^7} ^*}Z\9X^ «fl, ^ ^^.7]- ol^Al ^^S-S.^ DN o. ^Al7l^ ^Ojcf. 

<45> o]^: ( (608,609,610,611)^^: ^Sfl^ ^1^1 ^I^m^ DN^ sfl 

^1^^- ^-^Hr ^1^71^ DN ^&Mr 5L 3a°\] -£^^ a><2f £oj ; .g-Bfl^ol-g- 
(DistributionPointName) M«9 (ful lName)4 CRL-i: ^*>^ CA^ 

<>l#(nameRelativeToCRLIssuerH *fl^, 7>«a^ <&^*] ^-S*1H £-wfl^°l ^-g- 

^ 7><y^ o]^Ai si] ^^-» ^^1^14(612). 

<46> s. 7 •& -g- ^-^ofl 4=- ^ ^s.^- ^ ^ # ^^1 ^r^H 
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<47> £ yofl «>s4 £o) ( ^-cflwj- oi^ofl tfl^ -a-jL^-g: ^#*>7l ^^H^ oi^ 

■§-g-£S^^o|4 7><y*}5.-f-Ei ^-cfl« 0 >^ ^ja^E vil«y(SUBJECT_NAME)^- 
(701) #tj|i£ ^^Hl •LDAP.SEARCH' ^-S- ^^-(702). #7H^ ^ 

^-t- *}-8-«H *W704)5. tftflHN*) ja.^*><3(703) t)qg.z). 

^(704)^ s» «>^r tftflijj- ol^s^ sfl^^r £ 3a°fl S.*] 

€ CRL^-tifl^(crlDistributionPoint) ^#^(705). 
<48> ZLel Jl, -£^30.3. CRL^fl^(crlDistributionPoint) ^iL^H #*-il<y 

. (fullname)-i- ^(704)3. CRL-g: ^*A# ^.^^(706) ' 

' SS] ^Hl(704)fe- CRL^«fl^(crlDistributionPointHH sfl^ DN^ o]^-o| w.o} - 

^ CRL ^^^(707). 

<49> ZLSl^, A>-g-^> ^TgKfr CRL 7l «VAS. -B-JLAl^V ^ ^ 1" Sfla.^ 

(708), (705)^°fl*l CRL^-tifl^(crlDistributionPoint) ^Ji* <>l-g-*fl tftflig- 

<?}#*|S.^-Ei <&^*\2\ ^^X* ^#5>J1(709), sfl^ °^^S7} CM &^-*]» 
*i*}<*H710) n^r ^^S.7\ CM <&°-t£ -R-JL^-i- Ji^51(711), 

^S'SJ^ CM 54°-^ tftflifj- <y^ 7 > Sl3l*tK712). 
<so> JE 8 nj-g- ^ ^3 ^ # Sl^l^^l ^ <?1 
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<5i> 5. 8*fl v}2\. go) t CA7> A)-g-^ <>1^H» 31*1 *>7| ^sflA^ tflxg- 

(crl_dp_flag=yes)°l sK]*H( 8 01) °] ifl-g-oj ^3*1 #53:°-^ ^3 

. ^>ji(802), -a^sisa^ 7>«a^ <?i^>h» ^^i^^^ ^ o1 ^ 

<52> 7><a^> SI^H^-t 3 ^ CRL^-wfl^(crlDistributionPoint) ^ 

#*>Ji, ^lS.-¥-El cf^l ^-afl^(DistributionPoint) -> ^-yfl^tfl^ 

(DistributionPointName) -> #^1]^ (ful lName)# ^#^-(804). HBlJL, ^-wfl^ 
*CDistributionPoint) -> ^-tifl^l^ (DistributionPointName) -> (ful lName)^ °l 

-.#°i -^-^m *n*i^i- *fl# c-noiE^io]^(806)# -i-sfl 3^*1- 

-H(805), ^-wfl^(DistributionPoint) -> ^fl^l'SKDistributionPointName) -> 

#t|l«3(fullName)^ o]s.o] «-<^ ^1^^ s)-^ *fl^ til°lEitilHi( 8 06)«- 

-f-Sfl S.S.Al^lc|-(807). 
<53> o)^ > (803)^^- 3§-f% g_ELQ 7}<$t.}<>) °1^*H*1 ^^wisil- 

« Bll*l*Kr A}-ft~l- 7}<$x}7} JSL^ sfl^o^tH ^#*>J1(808), (807)^^1^ 

(809) afl^ CRL 2}-^^ c]i3Jig.e| ^tfHH :&e)sRr DIT^l Jn^ofl 7)1*1 sKE.^- ^ 
tK810). 

u|-e}^ «}<2]- £o) AjUH N7fl^ ^-^SlTfl ^e^^cf. 
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^ -frjL ^fi.7> CRL-i- *V-8-*> 3^*3.2.3. cf^rS. 

# ^SM^H, n 7fl^ CRL ic^oll ^-^SlTll CRL ^^t ^ ^ 

<56> o]Aj-oflA-l ^t^*)- yj-ig^. ^Al^ ^ £^<^1 Sin tt^S]^ 3°1 

<4^J1, A>Aj-o. ^o^x] ^ ^fl xfl6fl^ 7>^1 *|«;, ^ ^ 



A^S-^Bl A}-g-*> ^^g^ O.S t}£^H.wK^ CRL^ 3.7] 7} ^7} nfl-g-ofl , #tfl# o]^ 

<58> cJ^S.el >H«1 ^ ?ti^ s^S. ^re^Va CRL* <^ 

, ^ ^e] ^-^ (balance) XI Til -g-^ ^§ ^ ^ CRL tHSfil ^ 

<59> ^l'M-S., A]^^ ^°IH JUS DP ^l^^#^r CRL^l cf^r^l CRL5. ^-e]£)ji 
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^ ^ ^ i3>3 Af-g-^V ^-§-^ ^ Jl^7> ^cf. 
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l^tt 1] 

31*]-=--^ #3 ^IfN ^1^1 ^-^-(CRL : Certificate 

Revocation List) ^ «J-*H1 , 

^*Rr *0 1 #31; 
^-7] sl^8*W ^ 7 }-<£*} <y^§ ^«k=. ^p-^l* 

» *ll 2 #31; 

3#*H=- *ll 3 #31; ^ 
^>-g-^ 91^9 <#7] 31*1^^ ^Hfl^-g; o]^}c^ o] 

^ ^A]s>Jl, ZL tfl-g-^g- TflA]^ 4 #31 

» i^sRr ^1^1^ #3 a o v ^. 

13 n 1 * 2] 

31 i M 5ft<>H, 

^71 31 1 #31 fe, 

DlKDirectory Information Tree)^ ic£. ^(number of nodes in DIT, fH&r 43^) 

Q *fl4=l^(H())» 33*Kr 31 5 #31; 
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#7l 7}<£x} ^*Rr 7]^- ^ ^ A^|u.a]E ti)oj(SUBJECT_NAME)^r «fl4=) 

<gs|&.0 3. ^*Rr ^1 6 #31; 
#7l ^ ^ £^?M~g- ^-g^M 31*1^3 ^-tifl 

£r *ll 7 #31; ^ 

• #7l ^>#^1 ^ ^ ^ gflxg- £^&(crl_dp_flag)* ^ - 

^ *ll 8 #31 

» ^l^i 31*1-^ ^ y o v ^. 



*n i swi, 

#7l 2 #31 

^(crl_dp_flag=yesH °1 ^fl-M ^^§^^1 ^^1, ^ 

^3&-°# ^4=]^-^ 7>^^ ^ Lil<y(SUBJECT_NAME)# 
5 #31; 

#7l ^1^1 Ml^(SUBJECT_NAME)o)l cfltb *fl3 SKVtmp)* *fl 6 

#31; 

#71 *H4l&(VtmpH1 nj-a* #71 Sfl^&ol SL^tt ^SKn)* ^#S>7m 

#71 ^-?>^(n)# *fl# 91^7} SH^S* nfl, ZL ^^7} ^ ^ 

^1^1^-^-^ DNCDistingushied Name)* ^ A l ?1 ^ >H 7 #31; ^ 
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^s^ll- ^#sHr *)1 8 #31 

» 2£#*>*r ^I^i 31*1^- ^ u o V ^. 

4] 

*H 1 ^ ^fl*l *ll 3 ^ ^ ^ ^ ^-ofl 5a<H^, 
#71 ^1 3 #31tt, 

7><g*>3.^El -tftfl*^ y.ajE vil<y(SUBJECT_NAME)^r <3^<>> -ShW $1^*H 

#71 ^g-# ^V-g-^H ^^SSl A-l^S. tftfl^ <?l^i» -MJ^I-aL, #7] 

^ti^E vil«y(SUBJECT_NAME)^r °1-8-«H ^-tS-^-S: #tflw 0 V <y^ S j=L 
Ei *fi# t^^H ^ ^^.S ^#*Rr 10 #31; 

*>JL, #71 .MH tcfs}- gfltg- DN^l °l-§-ol ^>7l ^^s-s-o. ^^H>^ 

ii #31; 

#^5.*^ <y^o] oj^al^i- ^#*Hf 12 #31; ^ 

^-71 *(]# ^S^^7V sf|*l^MMI ^^1» ^Sl*H ^ o a^^i^7> 

A-l ^1^1 S.^- ofl &°-# >£tflwj- °1^H3 -a-jL^-i: Ji^JL, *fl# °^^l7} <&^*\ Bfl 
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